406,221 results · Feed
-
Medium 4.8
Stored XSS in pre-login notice via reachable legacy logon route
In openEQUELLA before 2026.2, the pre-login notice is stored as HTML and rendered on the legacy logon page without encoding or sanitisation. A user holding the EDIT_SYSTEM_SETTINGS permission can set a notice containing an arbitrary script (PUT /api/preloginn…
-
Medium 6.9
Unauthenticated IDOR Enables Disclosure of Other Users’ last-known details
In openEQUELLA before 2026.1, the GET /api/userquery/userinfobackup endpoint performs no authentication or authorisation check. An unauthenticated attacker who supplies another user's uniqueId can retrieve that user's stored personal details (username, first …
-
High 7.1
XML External Entity (XXE) Injection in Metadata Field Allows Arbitrary File Read
In openEQUELLA before 2026.1, the XML parser used for item metadata does not disable external entity resolution. A user permitted to create items (CREATE_ITEM) can submit crafted XML to POST /api/item and cause the server to read arbitrary files accessible to…
-
Medium 6.1
XML External Entity (XXE) Vulnerability in SOAP Interface Allows External Entity Expansion
In openEQUELLA before 2026.1, the SOAP API parses XML supplied in the stopEdit operation with a parser that resolves external entities. This allows an attacker to read arbitrary files accessible to the openEQUELLA service or cause the server to issue requests…
-
Critical 9.4
Unrestricted Command Execution via system.execute
In openEQUELLA before 2026.1, the system.execute() function available to the scripting engine runs supplied operating system commands without validation or an allow-list of permitted executables. A user able to create or edit scripts can use it to execute arb…
-
Medium 4.8
Stored XSS via Pre-Login Notice Image Upload Serves Attacker HTML from Application Origin
In openEQUELLA before 2026.1, the pre-login notice image upload endpoint (PUT /api/preloginnotice/image/{name}) does not validate the type of uploaded files and serves them with a Content-Type derived from the supplied filename. A user holding the EDIT_SYSTEM…
-
High 8.3
Improper input validation in Bixby prior to version 4.0.85.6 allows privileged local attackers to launch arbitrary acti…
-
Medium 5.6
An attacker who controls the registry, a mirror, or the network path to it may be able to serve arbitrary image content…
-
Medium 5.3
nipy nibabel Header volumeutils.py array_from_file memory allocation
A security vulnerability has been detected in nipy nibabel up to 5.4.2. The affected element is the function array_from_file of the file nibabel/volumeutils.py of the component Header Handler. The manipulation leads to uncontrolled memory allocation. The atta…
-
Critical 9.8
The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed contains an insecure access control flaw that allows an attacke…
-
Medium 6.5
Insecure permissions in the ContentProvider component of mhss1 MyBrain v3.1.0 allows unauthorized attackers to arbitrar…
-
Medium 5.1
Insecure permissions in Mission Control / AIMSICD versionCode 2026080501 allows unauthorized attackers to invoke an exp…
-
High 7.5
Insecure permissions in USP Ultimate Screenshot Painter versionCode 240213.009 allows unauthorized attackers to move or…
-
Medium 6.5
Insecure permissions in the MirakelInternalContentProvider component of Mirakel v3.0 (versionCode 60) allows unauthoriz…
-
Critical 9.8
An issue in AndBible versionCode 1111 allows attackers to execute arbitrary code via uploading a crafted module zip.
-
Critical 9.1
Insecure permissions in lz233 Tarnhelm v1.8.2 (versionCode 20250630) allows unauthorized attackers to invoke an exporte…
-
High 7.5
Insecure permissions in the ActivityMain component of M66B/Marcel Bokhorst NetGuard no-root firewall versionCode 202608…
-
Medium 6.5
Insecure permissions in the object/Page.java component of MBasov OMN Outline notes Markdown versionCode 3400 allows una…
-
High 7.5
An issue in Nextcloud versionCode 30390190 allows attackers to force victim users to logout of their accounts and switc…
-
Critical 9.1
Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to make arbitrary changes to anot…
-
High 8.1
Insecure permissions in Ghost Commander File Manager versionCode 479 allows unauthorized attackers to arbitrarily read …
-
Critical 9.1
Insecure permissions in wbpxre150 Shopping List v11.0 (versionCode 11) allows unauthorized attackers to invoke an expor…
-
Medium 5.3
A Server-Side Request Forgery (SSRF) in the url/title/author/coverUrl component of FocusPodcast versionCode 70allows at…
-
Critical 9.8
An issue in libretro RetroArch v1.22.2 allows attackers to force another user into loading attacker-supplied code in th…
-
High 7.5
Insecure permissions in the autosave component of AppML neutriNote CE versionCode 1387 allows unauthorized attackers to…
-
Critical 9.1
Insecure permissions in the CardProvider content provider component of helloworld1 AnyMemo versionCode 20260730 allows …
-
High 7.5
Insecure permissions in craftxbox YubiClip XOR fork v1.0.1 (versionCode 10003) allows unauthorized attackers to trigger…
-
Critical 9.1
Insecure permissions in Code Catcher versionCode 131 allow unauthorized attackers to arbitrarily manipulate the app's S…
-
Critical 9.1
Insecure permissions in the CitrineContentProvider component of Citrine v3.1.0 (versionCode 62) allows unauthorized att…
-
Critical 9.1
Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized attackers to write and read notes in ano…
-
High 7.5
Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized attackers to arbitrarily manipulate the a…
-
High 7.5
Insecure permissions in klassm AndFHEM v2.4.1 (versionCode 241, the verified build) allows unauthorized attackers to ar…
-
Critical 9.1
Insecure permissions in Bulk Share : Location Sender v2.1.0 (versionCode 5) allows unauthorized attackers to invoke an …
-
High 7.5
Insecure permissions in WikiAndPad alpha/beta v0.2alpha03 (versionCode 200300) allows unauthorized attackers to export …
-
Critical 9.1
Insecure permissions in MBasov OMN-Go versionCode 26080824 allows unauthorized attackers to invoke an exported componen…
-
High 7.5
An issue in Forkyz versionCode 8500000 allows attackers to arbitrarily change another user's storage settings via suppl…
-
High 7.5
Insecure permissions in ProjectMAXS MAXS Main v0.5.19 (versionCode 19) allows unauthorized attackers to arbitrarily man…
-
High 7.5
Insecure permissions in Share 2 Archive Today versionCode 61 allows unauthorized attackers to arbitrarily overwrite ano…
-
Critical 9.1
Insecure permissions in Yet Another UPnP Controller versionCode 50200 allows unauthorized attackers to invoke an export…
-
High 7.5
Insecure permissions in Fossify v1.3.0 allows unauthorized attackers to access and read another user's stored contacts.